WP-0011 T05: live deploy revenue.coulomb.social on railiance01

Image 0.1.1 (schema path fix), OpenBao ESO store, CNPG cluster, TLS,
pilot Phase re-registered on public API. Founding token local-only.

k8s/railiance/bootstrap-job.yaml

@@ -30,7 +30,7 @@ spec:
         fsGroup: 10001
       containers:
         - name: bootstrap
-          image: forgejo.coulomb.social/coulomb/target-revenue:0.1.0
+          image: forgejo.coulomb.social/coulomb/target-revenue:0.1.1
           imagePullPolicy: IfNotPresent
           env:
             - name: TRF_BOOTSTRAP_BINKY

k8s/railiance/deployment.yaml

@@ -25,12 +25,16 @@ spec:
         fsGroup: 10001
       containers:
         - name: target-revenue
-          image: forgejo.coulomb.social/coulomb/target-revenue:0.1.0
+          image: forgejo.coulomb.social/coulomb/target-revenue:0.1.1
           imagePullPolicy: IfNotPresent
           ports:
             - name: http
               containerPort: 8000
           env:
+            - name: TRF_SCHEMAS_DIR
+              value: /src/schemas
+            - name: TRF_SPECS_DIR
+              value: /src/specs
             - name: TRF_DATABASE_URL
               valueFrom:
                 secretKeyRef:

k8s/railiance/externalsecret.yaml

@@ -22,7 +22,8 @@ metadata:
 spec:
   refreshInterval: 1h
   secretStoreRef:
-    name: openbao
+    # Railiance01 interim store (token auth), not coulombcore's openbao store.
+    name: openbao-target-revenue
     kind: ClusterSecretStore
   target:
     name: target-revenue-runtime

k8s/railiance/migrate-job.yaml

@@ -28,7 +28,7 @@ spec:
         fsGroup: 10001
       containers:
         - name: migrate
-          image: forgejo.coulomb.social/coulomb/target-revenue:0.1.0
+          image: forgejo.coulomb.social/coulomb/target-revenue:0.1.1
           imagePullPolicy: IfNotPresent
           env:
             - name: TRF_RUN_MIGRATIONS